CANBus Determining Network Baud Rate, Automatic bit-rate detection
http://www.canbushack.com/blog/index.php?title=determining-network-baud-rate
Determining Network Baud Rate
So you found a CAN BUS to reverse engineer, but you don't know it's buad rate.
There are a couple to find it out.
One.
Go one-by-one through a possible list.
CAN BUS baud rates tend to be of only certain baud rates.
I am not positive, but this most likely has to do with the common crystal speeds used in microprocessors.
The slower the crystal, the slower the bus speed.
So baud rates tend to be one of the following:
33,333 bps, 50 Kbps, 83,333 bps, 100 Kbps, 125 Kbps, 250 Kbps, 500 Kbps (Most common), 800 Kpbs, and 1,000 Kbps.
The last two being the least common as they suffer from reduce network length issues.
You will not find a baud rate that exceeds 1,000 Kbps as this violates the CAN BUS specification.
If I do not know the baud rate of the network that I wish to connect to,
I will typically go through this list and hope one works.
In some cases you may effectively decapitate the network by having the wrong baud rate set in your tool.
So make sure you are not switching baud rates while the vehicle is in motion! This could cause undesired effects.
Two.
Use an osciliscope or logic analyzer.
The foolproof way of measuring any serial data network such as CAN BUS is to use tool that can measure the one bit time.
Baud rate is simply the inverse of one bit time.
So if you can measure this, you simply take 1/(one bit time) in seconds and you have your baud rate.
The best location to find a single bit on CAN BUS is to look at the last transition.
This is typically the ACK bit (acknowledge).
This is where receiving nodes send back a single bit to say that they properly received the frame.
This is always a bit by itself as the bit to the left is recessive as well as the bit to the right whereas it is dominate.
So it will stand out and you should have little trouble finding it.
So look to that last transition and mesure from on transition to the next and you should get something like 0.000002 seconds.
In this case you will simply take 1/0.000002 and you will get 500,000.
Thus the baud rate will be 500,000 Kbps. Done!
具有can总线模块及自动速度检测的微控制器
一种用于初始化微控制器中的控制器区域网络CAN模块的方法,在所述方法中可提供以下步骤:
测量CAN信号的多个下降沿或上升沿之间的周期时间;
对所述周期时间进行排序;
确定所述经排序周期时间的相邻周期时间之间的差值;
对所述差值进行排序;
从所述经排序差值选择第一差值并从所述第一差值确定第一频率;
使用所述选定频率初始化所述CAN模块;
接收CAN信号帧;
确定是否发生错误;
如果发生错误,则选择下一频率并重复初始化所述CAN模块直到已发现有效的CAN频率为止。
http://www.datamicro.ru/download/801_v01000000.pdf
5.2 Automatic bit-rate detection
5.2.1 General In order to meet the requirement that a running CAN network is not disturbed by error frames,
it is not suitable to “test” the reaction of the network by sending out messages on all possible bit-rates.
The method for bit-rate detection should be non-reactive for the complete CAN network.
The two possible methods are:
• Measuring the time of a single bit
• Suppressing transmission of error frames (listen-only mode)
5.2.2 Measuring the bit-time of a single bit
Measuring the time of a single bit does not require a CAN controller,
but a good and fast timer module inside a microcontroller.
The concept has already been described in /AP292501/.
During the detection phase the CAN controller is switched off.
The timer module measures in a consecutive process the length of a single bit inside the data stream.
The main problem of the method is to find one single dominant bit – and only one – inside the frame.
There is always one dominant bit inside a CAN frame which is surrounded by two recessive bits:
the acknowledgement bit.
But this is only true if there are at least two CAN nodes on the bus.
Assuming only one active node (e.g. the CANopen manager is scanning the bus),
this method requires a specified identifier field or data field, otherwise it will fail.
Also the method requires a timer module, whereas the clock frequency should be higher than 10 MHz.
For a clock frequency of 10 MHz the difference between 800 kbit/s and 1 Mbit/s is just 2 timer ticks (refer to table 2).
Due to the drawback that at least two active nodes are required
and the high demands on the timer module this approach does not seem suitable.
5.2.3 Analyzing in listen-only mode
The listen-only mode is a feature that has already been implemented in several CAN controllers.
In listen-only mode, the CAN controller only listens to the CAN receive line without acknowledging the received messages on the bus.
It does not send any messages in this mode.
However, the error flags are updated so that the bit timing may be adjusted until no error occurs.
The necessary software algorithm is shown in Figure 1.
The CAN controller is initialized for acceptance of all messages (i.e. the global / local mask is set to 0).
The bit timing values of the first possible CANopen bit-rate (10 kbit/s) is loaded
and the controller is switched into “Listen-Only” mode.
Assuming that there is traffic on the network and the bit-rate is correct, the message is accepted.
The error registers will not change and the flag for message reception is set inside the CAN controller.
This means the correct bit-rate has been detected.
Assuming the bit-rate is not correct, the error flags will be updated (stuff-, CRC or form-error).
In this case the CAN controller is switched off and the next possible bit timing values are loaded from the bitrate table.
The minimum number of required messages to find the correct bit-rate is eight
(i.e. the number of defined CANopen bit-rates).
However, it shall be taken into account that a delay between the CAN messages is required, as shown in Figure 2.
The delay Tcc is the time to configure the CAN controller
(switch CAN controller off, select next bit-rate, set CAN controller into “Listen-Only” mode).
Depending on the interframe space and the time to re-configure the CAN controller,
the number of required CAN frames may be higher.
In addition to that, a CAN frame might be corrupted when the detection on the correct bit-rate is in progress.
This means the algorithm will exit in the „bus error“ branch.
One improvement of the algorithm is to check two consecutive times for a bus error,
leading to a more stable behavior even in a disturbed environment.
CANBus Determining Network Baud Rate, Automatic bit-rate detection的更多相关文章
- A CANBus Tiny Network without Transceiver ICs : STM32F4 Discovery
Sometimes you have a CAN equipped processor on a low cost board but it has no CAN transceiver chips. ...
- 【论文阅读】An Anchor-Free Region Proposal Network for Faster R-CNN based Text Detection Approaches
懒得转成文字再写一遍了,直接把做过的PPT放出来吧. 论文连接:https://link.zhihu.com/?target=https%3A//arxiv.org/pdf/1804.09003v1. ...
- Keras 自适应Learning Rate (LearningRateScheduler)
When training deep neural networks, it is often useful to reduce learning rate as the training progr ...
- 从TP、FP、TN、FN到ROC曲线、miss rate、行人检测评估
从TP.FP.TN.FN到ROC曲线.miss rate.行人检测评估 想要在行人检测的evaluation阶段要计算miss rate,就要从True Positive Rate讲起:miss ra ...
- layui(七)——rate组件常见用法总结
layui中提供了rate组件,用法很简单,直接上代码. <div id="test1"></div> <script> layui.use(' ...
- VBV Rate Control
Part 1 <06/05/07 12:08pm> Manao | he is negating a float by printing it, adding a "-" ...
- sicily 1017. Rate of Return
Description Jill has been investing in a mutual fund for a while. Since her income has varied, the a ...
- Excel中RATE函数的Java实现
public class RATE { /** * calculateRate:类excel中的RATE函数,计算结果值为月利率,年华利率 需*12期. <br/> * rate = ca ...
- learning rate warmup实现
def noam_scheme(global_step, num_warmup_steps, num_train_steps, init_lr, warmup=True): ""& ...
随机推荐
- Android Service 服务
一. Service简介 Service是android 系统中的四大组件之一(Activity.Service.BroadcastReceiver.ContentProvider),它跟Activi ...
- iOS 复选框风格转换 Switchery 开关效果
Switchery 是个简单的 JavaScript 组件,只要几个简单的步骤就可以帮助用户把默认的 HTML 复选框转换成漂亮 iOS 7 样式风格.用户可以很方便的自定义这种转换,所以可以很好的配 ...
- php 在线 mysql 大数据导入程序
1 <?php header("content-type:text/html;charset=utf-8"); error_reporting(E_ALL); set_tim ...
- c 按范围快速指定整数
以前用过octave, 和matlab类似的软件, 指定范围非常方便 i = 1:10:100; 就可以得到 10 20 30 ... 100 这一系列的数据, 但是在c里面, 必须手动写循环, 太 ...
- _margin和margin的区别
_margin和margin的区别 _margin和margin的区别 Question: margin:15px 300px 0px 100px; height:72px; width:188px; ...
- VBA
1.ActiveWorkbook是Application对象的一个属性,表示的是一个active Workbook. 2.Application对象可以获得一些顶级的对象,比如ActiveCell,A ...
- Linux配置静态IP
在一块SSD的CentOS配置静态IP 1. 配置静态IP #vi /etc/sysconfig/network-scripts/ifcfg-eth0 DEVICE="eth0" ...
- bzoj3717: [PA2014]Pakowanie
Time Limit: 90 Sec Memory Limit: 256 MBSubmit: 128 Solved: 43[Submit][Status][Discuss]Description 你有 ...
- 《学习OpenCV》练习题第五章第二题abc
代码: #include <stdio.h> #include <opencv/highgui.h> #include <opencv/cv.h> #include ...
- Android通过tcpdump抓包
1. 手机要有root权限 2. 下载tcpdump http://www.strazzere.com/android/tcpdump 3. adb push c:\wherever_you_pu ...